jens-maus / yam

:mailbox_with_mail: YAM (short for 'Yet Another Mailer') is a MIME-compliant open-source Internet email client written for Amiga-based computer systems (AmigaOS4, AmigaOS3, MorphOS, AROS). It supports POP3, SMTP, TLSv1/SSLv3 connection security, multiple users, multiple identities, PGPv2/v5 encryption, unlimited hierarchical folders, an ARexx interface, etc...
https://yam.ch
GNU General Public License v2.0
63 stars 18 forks source link

Save configuration without passwords #564

Closed tboeckel closed 8 years ago

tboeckel commented 8 years ago

Originally on 2014-05-21 11:52:13 +0200


Problem

Often users are asked to provide their YAM configuration to be able to directly inspect that file for possible issues. This requires the users to strip their passwords from that file to avoid any misuse due to unintentionally revealed passwords. This additional manual stripping always includes the danger that some passwords might be forgotten to be removed.

Enhancement recommendation

Add a new menu item (i.e. "Save without passwords") to the config window's menu to save the current configuration to a selectable file, but without any passwords or with a short "XXX" sequence instead of the password. This would make it lots easier for the users to upload their configuration to the bugtracker without having to touch the the file after having saved to it a separate file.

tboeckel commented 8 years ago

Originally on 2014-05-21 15:36:00 +0200


In (d6b7531):

tboeckel commented 8 years ago

Originally on 2014-05-21 15:46:13 +0200


Release Note: Added a new menu item in the menu of the configuration which allows to save the configuration to a user selectable file without private data (username, password). This makes it easy to create a configuration file which can easily be published without risking hacked accounts due to accidentally published passwords.